Silicon Investor (SI) -- The First Internet Community

STOCKTALK

We've detected that you're using an ad content blocking browser plug-in or feature. Ads provide a critical source of revenue to the continued operation of Silicon Investor. We ask that you disable ad blocking while on Silicon Investor in the best interests of our community. If you are not using an ad blocker but are still receiving this message, make sure your browser's tracking protection is set to the 'standard' level.

Technology Stocks : Intel Corporation (INTC) -- Ignore unavailable to you. Want to Upgrade?

To: steve harris who wrote (152380)	12/13/2001 3:15:40 PM
From: wanna_bmw	Read Replies (1) \| Respond to of 186894

Stevie, it looks like Intel's Itanium is facing even tougher competition from Sun and IBM. dailynews.yahoo.com Solaris, AIX Hole Leaves Computers Wide Open SAN FRANCISCO (Reuters) - A security hole in software from Sun Microsystems Inc. (Nasdaq:SUNW - news) and International Business Machines Corp. (NYSE:IBM - news) could allow malicious hackers to take control of powerful servers running in many corporations and universities, security experts said on Wednesday. Internet Security Systems Inc. (Nasdaq:ISSX - news) researchers have uncovered evidence in Internet chat rooms that hackers have already started developing tools to take advantage of the vulnerability, said Dan Ingevaldson, a team leader at ISS' X-Force research and development lab. The vulnerability affects the latest release of Sun's operating system, Solaris 8, and earlier versions, as well as IBM's AIX versions 4.3 and 5.1, according to an advisory issued by the Computer Emergency Response Team (CERT) at Carnegie Mellon University. The hole is located in the ``login'' program that allows people to sign on to the operating system remotely by entering a username and password, ISS said. The vulnerability can be exploited only if certain remote command protocols, such as Telnet, are enabled, which they usually are by default, the company said. ISS discovered the loophole in October and has been working with Sun and CERT on a fix, said Ingevaldson. ``We're not aware of anyone experiencing a problem with this,'' said Sun spokesman Russ Castronovo. The security hole is very serious because there are so many computers in corporations and universities that run Solaris and because of the amount of harm someone could do if they were to gain complete control over a vulnerable machine, he said. ``Once you have super-user access to a machine you can do anything you want, modify files, create them, sniff network traffic,'' Ingevaldson said. A temporary software patch is available now and a fully supported and tested fix will be available next week for download from sunsolve.sun.com, Ingevaldson said. Fixes are pending for AIX, according to CERT. wbmw